In this fourth article in our series on "Big Data & Issues & Opportunities" (see our previous article here), we focus on some of the cybersecurity aspects of big data processing. Where relevant, illustrations from ...

On 21 January 2019, the French Data Protection Authority (CNIL) has issued the first French sanction under the GDPR since the entry into force of the Regulation, namely a pecuniary sanction of EUR 50 million ...

At long last, the European Data Protection Board ("EDPB") draft guidelines on the territorial scope of the General Data Protection Regulation 2016/679 ("GDPR") are here. Please find certain highlights below. Should ...

The DEFeND project (Data Governance for Supporting GDPR), which started on 1 July, is a research and innovation project with a duration of 30 months funded by the EU Commission (2,737,300.00€).

On September 5, 2018, the much-anticipated Belgian Privacy Act ("BPA" or the "Act") implementing the GDPR and repealing the Privacy Act of 1992 was published in the Belgian Official Gazette.

On 5 June 2018 the EU Court of Justice (ECJ) released a decision in the case of Wirtschaftsakademie Schleswig Holstein (case no C‑210/16).

The Article 29 Working Party (A29WP) has now published its final guidance on consent under GDPR (WP259 rev 0.1).

With only a few weeks to go until the General Data Protection Regulation ("GDPR") becomes directly applicable on 25 May 2018, many organisations are entering a crucial period as they seek to 'upgrade' their privacy ...

Last 28 February the Spanish Data Protection Agency ("SDPA") presented two guides to help and encourage compliance with the General Data Protection Regulation ("GDPR"), applicable as of 25 May.

English translation of letter sent by Dutch data protection authority to Dutch Ministry of Finance on the interaction between PSD2 and GDPR